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ABSTRACT 
Drones are gaining attention due to ts possibility to support wide 
diferent types of applications. Since they ean operate in diferent 
‘vironment, it is possible to encounter uncertainties and excep 
tional situations, not initially predicted, during the use of drone 
based applications, In this reali, slf-adaptiv strategies ave been 
socestfully used to guarantee resilience and continuous execu 
tion af such applications despite environment changes. Although 
some modelling approaches emerged to represent drone concept, 
they ate limited to model only expected fight plan ot include 
fev environmental conditions and drone resources, which restrict 
considerably their use. To mitigate those problems, this work pro 
poses a domain-specie language called DRESS-ML, which allows 
‘modelling exceptional situations and self adaptive behaviours for 
drone-baed applications. It relies on the Given-When-Then ten 
plate used in the Behaviour-driven development (BDD) technique 
And the some of the main Aspect-riented Programming concepts, 
‘We validate the applicability of our language though a proof of on 
cept regarding an example application that uses a drone to monitor 
‘forest to search for ie spots, 
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1 LAY ABSTRACT. 


Drones are gaining attention due to thelr possiblity of supporting 
diverse applications and environments, such at seatch-and-rescu, 
surveillance, and goods delivery. Du to this variety of applications, 
drones can face both uncertainties and exceptional situations that 
they dd not initially foresee during flight plan. tn this sense, pro 
ding the abit to monitor the system and its environment and to 
change the system to ensute resilience and continuous execution are 
benefits of e-adaptation strategies. though some studies have 
proposed approaches to model drone concepts, they ae inited to 
‘mode! only expected flight plans or include few envizonmentl con 
ditions and drone resources, which restrict considerably their use 
This work proposes « domaln-specife language, called DRESS-ML, 
‘hich allows modelling exceptional scenarios and sel-adaptive 
bbchaviors to mitigate those probleme. The language is based on an 
well known structure used for specifying system behaviour and 
the main concepts ofa programming paradigm that injects encap 
slated behaviours in the systems A practical example that uses a 
drone to monitor frestto search for ie spots is used to evaluate 
the proposed language, demonstrating its applicability to model 
‘various exceptional scenarios 


2. INTRODUCTION 
‘Unmanned aerial vehicles (UAVS), most popularly known as drones, 
hhave been used for mlitary puspotes for several years (8. ln ml 
itary applications drones are considered an essential element of 
the battlefield, since they capture diferent kinds of information 
‘om a large scale in terms of time and space (eg surveillance and 
Intelligence recognition) [25], 

‘Modern technological advances and miniaturistion have en 
abled the ute of drones in several civil applications, such as pro 
tection of agricultural products [2], seareh and rescue [2] (21), 
and delivery and monitoring af goods [2]- More recently, deones 
hhave also ben used to help containing the glbal pandemic ofthe 
COVID-19,for instance, by supporting French authorities! to Find 
cout (and tax) people that are leaving home to go to unnecessary 
places, such as beuches, and to rescue dogs trapped by lava from 
‘i erupting volcano on the Spanish island of La Pali? 

‘Although drones canbe divecty controlled via remote contrat 
bya pilot, more advanced drones ave pre-planned behaviours that 
reduce the need of «human intervention, thus increasing the level 
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of automation. An autonomous drone selects actions from a Bxed 
Pulte folowing a static decision process based on ts immediate 
Sate environment and goals 18), 

However there are lots of uncertainties that aot inal be 
predicted at design tine that generate exception stuations dating 
{he use of drone-based applications [17]. To tackle that, there ate 
{wo poster onthe one hand, thee ithe creation of cutom 
dade drones for specifi situation (eg alored one has been 
Bait for dtvering an organ oa hospital inthe USA in 20199). This 
ss very cost tine consuming, and usualy non zeusable for other 
situations, thus making this option unfeasible or very testi. 
On the other hand, drones could expand their degree of autonomy 
through selt-adaptive capabilities to deal with dynamic or unknown 
cvionments, contextal changes and system fies that may 
Spear daring the fight nhs ea, self apive techniques may 
bused to provide the ability to adjust the doue's behaviours oF 
Structures st untine without (or with hninised) human ner 
‘enton through adaptations triggered in esponse to changes 
{he envionment or by the software requiements, capabilities ot 
souls (7) 

‘Some work have proposed self adaptation approaches for done 
sed applications (12, 15,16, 2-30) They addres () drone qual: 
sty requements, suchas forensic readiness (28) and privacy [15 
(@) architecture-bsed adaptations, by updating the system con 
figuration o changing either the component structure or opera 
tional parameters in order to guarantee thatthe done's operation 
{snot iterruped or the systen's nonfunctional aspects such 
a dat-ntensive computing, distributed execution, and scalab 
iy [4 12,29, are improved at runtime; or (i) behaviourbased 
adaptation, by lterating missions a y-time in response tou 
forenen ctcumstances using diseet even-cotrller synthesis at 
runtime 30] or wrappers based on the aspect-oriented program 
‘ning [16]. However al of them focus on code level approaches for 
‘elbadapaton thus demanding the wer tobe asftwate engineer 
vith great tehsil lls 

Moreover, specifying exception scenarios, ie the ones that re 
«nite an adaptive behaviour ofthe drone. sila challenge. Some 
Spproaches have proposed the use of gener scenario modeling 
‘ottions suchas the Aestage Sequeice Charts [16] or UML Dia 
‘rams, bt such modeling languages may limit the description of 
thor pei scenarios fra partir domain, since some ipo 
tant information may not be propery represented. When modeling 
‘cceptiona scenario fr drones sme pclae havetobe take 
int account ke (0) esoures eg sensor, aetustrs and internal 
Components) (i) envionment condition (eg wind power and 
tirecton and (i policy regulations eq he drone has oben 
‘the visual in-o ight (VLOS) af the pls). An exception scenario 
‘hat involves some af those clement ay be very flea 0 model 
‘sing only generic scenario notations 

"Aware of those limitations other work have proposed modelling 
approaches for dones 1-313] that consider elements pei af 
the domain, However, those work model expected ight plans and 
Jace fe environmental conditions or drone esoutes, which 
$i considrably the poses to spel exceptional scenatios 
and adoptive behaviours 
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‘Toil thoce gaps, this work proposes the DRESS-ML, a domain 
specific language (DSL) to model drones exceptional scenarios 
tnd selfadaptive behaviours that provides high level abstraction 
(ofthe main available droue resources and environment variables, 
“This benefits the modeller (domain expert by reducing the con 
plexity of specifying both the exceptional scenarios andthe cr 
Tesponding behavioural adaptation strategies and by enabling the 
‘modelling of more possible situations, The DSL syntax bul upon 
‘concepts from both the Behavor-driven Development (BDD) [19 
‘which allows the specification of exceptional scenarios by using 
the worldwide wellknown Given-When-Then structure, and the 
Aspect-oniented programming (AOP) [14], which allows the repre 
Sent the drone main features as Jom points and adaptation strategies 
‘5 Befote/Afer/Around in advice clauses (19). Furthermore, it was 
provided a model-to-text (M27) transformation engine tht take 
‘input a DRESS specification fle and generates a wrapper to the 
Dragonfly simulator [17], thus allowing the user vey whether 
the seladaptation behaviour executes correct. The applicability 
ofthe proposed language hasbeen evaluated by a proof af concept 
‘considering an example application that uses drone to monitor & 
fest to seatch for Hire spots, 

"The reminder ofthis work i divided as follows: Section 3 dis: 
cusses the in tlated work; Section 4 details the DRESS language, 
pretenting its domain analysis, abstract syntax and modeling envi- 
onment, while the evaluation is shown in Section 5. Finally, Section 
6 draws the conclusions and future work, 


3 RELATED WORK 


1m [3] the authors presented FLYAQ, a tool to support a high-level 
description of missions ofa team of multcopters and the tomatic 
{generation ofthe detailed fight plan for each of them that con 
‘ere important aspects, such as preventing collisions with ather 
‘ultcopters and obstacles and respecting no-ly zones, The tol is 
composed by the Monitoring Mission Language (MML), which pe. 
mits to define graphically the missions astociated with a map, and 
an intermediate language named QBL, which represents waypoints 
and trajectories from the defined misions. Although FLYAQ also 
allows the user to define contextual information about the mission, 
such as no-fly zones and obstacles, the specification is very limited, 
‘making i dificult to model more complex contextual stations, 
DRESS-ML provides more mechanisms related to controlling and 
‘monitoring a drone and its envionment, thus enabling to describe 
‘more possible exceptional seenaroe and behaviours. 

“The workin {1] propose a script language, called Droneserpt, 
that i drone-platform agnostic. The focus of the language is to 
‘coordinate flight paths of single or multiple drones though actions 
(changing drone status, making movements or performing tas, 
sch as taking photos) and mission elements (a combination of 
actions), Although the language allows specifying changes in mis 
ons at runtime, it i not prepated fora context of el-adaptive 
systems, unlike the DRESS-ML. Another weakness ofthe Drone 
‘rip isthat it sytaxincludes few instrumentation elements, such 
‘ss sensors and actuators, desing only with camera, whereas DRESS 
ML contains several those elements in ie grammar, as detailed in 
Section 4 
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ronOs [13] is a framework that enables users to prototype 
personalised routes and behaviours of drones through three in 
{eraction types a drag-and-drop mechanism. a progeamming-by 
demonstration approach, and a user-based control of the drone. 
“Those modalities facilitate the use of drones by both experte and 
nor-experts and the programming interfaces are enabled only for 
‘making the planning and modification of fight routines, However, t 
isnot posible to speciy exceptional scenarios and the correspond 
ing adaptive behaviours, which is exactly the focus of DRESS-ML. 

Tm [2], the authors discuss an educational case study using & 
model-based system engineering approach fr eatly detection af 
design evrors in a UAV fe eyee. For that, the authors propose to 
Use SysML models associated with a free software to perform a 
debugging through formal verification. Ta use that approach, it 
Js necessary an incremental process that starts with a simple and 
abstract model and progressively advances toward higher real 
Inte model. Although the authors uses this process to specify 4 
UUAV system, i involves steps and models that are nt so simple to 
‘use, making the process ertor-prone n addition, the used models 
‘use a general-purpose language and they are not designed to sup 
port adaptive behaviour in the context of exceptional situations, 
<lifezenly from the DRESS-ML. 





4. THE DRESS MODELLING LANGUAGE 
“This section presents the proposed domain-specific language for 
specifying exceptional scenarios and self-adaptve behaviours for 
drone-bated applications. The main wer of the DSL is the expert 
inthe drone domain, Le, the person who understands how «drone 
Works, including its main features (ake off, manoeuvre, landing 
among others), sensors (eg, GPS, gyroscope), and actuators (eg, 
landing ger) as well asthe main envionment conditions that may 
Impact the drone’ Hy, such as wind and rain, among others. In 
the next subsections we present: (the domain analysis carried 
cut to identify the main concepts of the language (i) the DRESS 
abstract syntax; (ii the modelling envionment (i the model-to 
code generation approach; and (v) a process to use the proposed 
Tanguage 


4.1 Domain Analysis 


“Toincrease the expressiveness of the language it is necessary to 
encapsulate the knowledge about the target domain. Therefore, 
the domain analysis phase is a necessary step of the process af 
developing a domain-specific language (24. 

"To dentify and understand the concepts and properties ofthe 
domain addressed in the language proposed in this work, was 
fathered and analysed drone-related tems found in both academic 
‘ties and profesional artefacts, such ae simulation tals, specific 
application programming interfaces (APIS. and hardware com 
ponents, Thus relevant knowledge was extracted and grouped in 
sategoris, which grounded the proposed language. Each category 
Ina a set of elements each of them with a one or amore attbutes 
that characterise that element, The identified categories, elements, 
and attributes that compose the DRESS-ML ate detailed in Table. 

“There are five categories in the DRESS language: Drone, Mle. 
son, Fight Operation, Sensors and Actuators. The Drone eategory 
contemplates the MotionState and Barter elements. The fist one 
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encloses attributes that epresent the internal state information d 
rectly associated withthe drone movement, which may be in terms 
of manoeuvre direction, current position, distance from a position, 
Totation, speed, acceleration and allitude. The second element pro 
Vides information about the capacity, voltage, electrical current, 
‘ctu percentage and status of the drone’ battery. Drones have 
limited battery capabilites, therefore itis important to monitor and 
toensure that they consume low power. 

The Flight Operation category contains elements responsible 
for managing speci Aight seivities: SafeLand, Landing, Take 
Off, EmergencyStopMode, EmergeneySavingMode, FightControl 
and RTH, Hlements that have only the starusattbute have been 
{rouped, as seen in Table Takeoff and Landing clement represent 
‘operations for drone take off and landing, respectively. The Safe- 
land element dats with an operation to fore landing in situations 
that may be considered dangerous forthe drone fr instance, low 
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level of battery, hardware/software exors or GPS flute). Finally 
the EmergeneStophlode element manages operation to disarm the 
‘motors ithe drone has «erica eror during the fight. The Ener- 
‘gySavingMode clement sete battery level thresholds, which should 
{tigger warnings to the pilot or to pre-defined operations (foe i- 
stance, safe landing and RTH), FlightContol handles two posible 
fight modes: manual or automa, each of them with their speciic 

"The Mision category models automate fight elements: Cieult 
‘means thatthe drone repeatedly lie in cicles with respect toa 
specified point, while FolowMe makes the drone to follow a speciic 
{GPS coordinate. They expose waypoints, which consist ofa set of 
coordinates of interest (thre-dimensionl position) thatthe drome 
will ly to, and a status that indicates the situation of the mission, 
“The RTH clement represents the execution of the retur-to-hame 
‘operation, «useful safety feature that helps bringing the drone 
bhack tothe joumey start waypoint. Therefore, this resource has 
a attrbute to represent the home point and another ane that 
‘letermines the situation of this operation (statu. 

“The Senor eategory is esponsile for telemetry and monitoring 
the environment inorder to support the others calegores, We have 
‘dentified the following sensor elements: GPS, lentil Measurement 
Unit (MU), Accelerometer, Gyroscope, Compass, Magnetometer 
‘arometer, Anemometer, Thermometer, Hygrometer, SmokeDetec 
tor, and ObstacleAvoldancs, and Camera, The Actuator extegary 
eal with elements that convert energy into mechanical movement 
‘in onder to iterate the drone with the environment. We have i 
cluded the following actuators: Gimbal, Light, LandingGeat, and 
Payload Due to space limitation, we emlted the complete descrip 
tion ofeach sensor and actuator, but the reader can access that 
Information frou the project github sit! 


4.2 Abstract Syntax 


“The abstract syntac isthe specification ofthe language grammar 
sad defines all valid sentences of the language [5]. Uslly the 
abstract syntax is represented by a metamodel which is normally 
based on object-oriented entities, such as classes, attnbutes and 
sssoeations, Figure 1 provides « high level specification of the 
‘nlties that compose the DRESS-ML syntax by using simplified 
UML cats diagrams. Thote entities are based on BDD Given: Wheat 
‘Then structure. the AOP advices for the adaptive behaviour, the 
categories sted in the domain analysis presented inthe previous 
‘ection, and other supporting entities to model statements, expret 
sions and conditions, among others. The reader ean finda complete 
‘and detailed metamodel inthe github sepositary of the project 
Following we provide a general explanation ofthe main entities of 
the language 

mn DRESS-ML. an exceptional scenario ExcepronalScenario is 
defined by a Given-When-Then structure provided by the BDD 
technique and has 4 unique name. The Given entity expresses the 
‘world context through ase of conditional expressions (Conditionat- 
Expression entity), which include both drove and environmental 
slement, A conditional expression i formed by two main entities 
ComparativeEspresion and LoglcalEspression 
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Figure 1: DRESS-ML Metamodel 


“The ComparaiveExpression entity takes as a basis the dou 
snalyis, summarised inthe previous section, to create comparative 
‘conditional expressions reading the elements atebute and en 
‘onment variables whose values can be obtained from monitored 
‘components, te, drone on-board equiptients (eg, sensors) or ay 
external sources fom which the drone may get information eg 8 
conti tower of web services), Thus, this enity enables to formu 
late conditional expressions using the comparative operators 
poe "The expected values ae represented either 
‘enumeration, such as StauaEnu, which manifests the internal 
state or status of some elements (e,ERROR, ACTIVATED, CAL 
IBRATING), and ResultEnun, which represents a monitored out 
‘come produced by the sensors (eg: DETECTED. STRONG SIGNAL}, 
fo numerical values. Examples of comparative expressions a 
“Drone battery’s10™, "Wind speed <5", "RTH satus=-STARTED’ 
and “ObetacleAvoidunce resull=-DETECTED" 

‘The LogcalExpresion entity represents the concatenation of 
compaative expressions through the use of logical operators, such 
as “and” and "or" An example ofa logical expression i “(Fight 
CControlmode == AUTOMATIC ) AND (GPS status == ERROR)! 

‘The When entity represents an event that oceuts ding the Might. 
“These events are realized through commands performed by the 
emote controller, predefined missions or any ther Flight Operation 
entity and ate called to control or manage actuators and sensors 
present inthe drone. The EventEspression entity species event 
for a crtin category Iti complemented with a set of predefined 
values that can speciy the type of event through the EventEnum 
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cntty, which usually sa verb in the present tense. Exampl 
vents are “SafeLanding STARTS "EnergySavingMde PAU 
fd “Accelerometer ACTIVATES" 

‘Whenever the drone executes the event specified in the When 
‘clause, the adaptive behavior modeled in the Then clement is per 
formed, which means that events serve as triggers for adaptation, 
‘A wildcard value (""} may be required represent the exgeution 
‘of any ation for an event 

‘The Then entity contains information on the adaptation steps 
required for the exceptional scenario, It contains the Adaptvede 
haviour eaity that specifies the typeof adaptation that will be 
performed leveraging the AOP advice concepts (before after oF 
‘round, and makes an association with the AdapiveSeript entity 
that represents the adaptation itself The adaptation types before 
and after types havea similar behavior since they imply thatthe 
‘ulaptive behavior will be invoked before and ater, respectively, 
‘ofthe predefined behavior, Le, the event call defined in the When 
cent. The around type surrounds the command call defined i the 
‘When clause. ln other words, the predefined behavior invoked by 
the event specified inthe When clause i tepluced at runtine by the 
‘behavior modeled in the Then entity 

‘The purpose ofthe AdaptiveSerip entity it creates sequence of 
‘comamands to apply the adaptive beavis tothe drone. Each script 
‘ha an identification attdbute name) and one oF mate Statement 
enites. The can be commands (CommandExprssion entity) and 
‘onditon (else) o repetition (while) expressions 





43° Modelling Environment 


“The DRESS-ML was implemented using the Jtbraine Meta Program 
‘ming System (MPS), an open-soutce projet that provides tools to 
design both domain-specific and general-purpose languages [6 
Risa well known example of language workbenches, which ae 
software engineering tools that ease the implementation of new 
languages and associated tools DE, debuggers, consoles et} [9] 
“Therefoe, the Jetbrains MPS not only allowed to implement the 
proposed DSI, but also provided a modeling environment (the 
dito tol) tothe end users to ereate and validate specifications 
using the DRESS language 

“The Editor provides « cade-completion feature that helps pre 
venting mistakes by guiding the user to selaet correctly the possible 
ements fr each entry pint based on thei type and the grammar 
rules In addition, there are examples ofeach mode entity aiming 
teasing the understanding of iow to use a specific entity. Fur 
thermore, the editor diferentates the keywords by colors aad text 
effets, such a bold and tai 

‘Avot example, consider the modelling ofthe exceptional sce 
ratio depicted by Figure 2 using the Editor too. The exceptional 
scenario, called Keeping is extracted from [16] and addresses 
situation when a drone s fying to deliver an organ from one 
hhspital to another but the battery decreases to the rte lvel af 
108, which implies that the drone, based nite own tues, has to 
perform a sufe landing 

‘The exceptional scenario specifies that, given that the drone is 
close tothe target destination (the distance from the destination is 
ese than 2 Kin) and the wind is favorable is speed ie greater than 
Sean its direction is towards the east) when the drone le about 


to perform a sfe landing operation, then the defined self adaptive 
bbchavious. called geDestiation replaces (due to the around clause) 
the predefined drone behaviou, , instead of executing the safe 
landing proceduse, the drone will perform the set of commands 
contained inthe gaDestation erp. In this case, while the drome 
doesnot arrive in the destination, it will keep moving towards it 
‘This adaptation wil allow thatthe orga is delivered, thus malig 
the drone to accomplish its mission, 


Exceptional Scenario Keepfiying 
Siven: (Drone aistanee tron OESTINATION region ¢ 
2000 mand CC Wind.speed 2 5 a/s 3 
land ( Wind.divection == £4ST 1) ) 
nen: saFeLanding STH37S 
Than exeevte icin soDestanataon 
sobestination 








1-distance fron DESTINATION region # 
2 


rection DESTINATION region 


Figure 2: Modelling the KeepFlying exceptional scenario us- 
ig DRESS-ML 





44 Code Generation Process 
From a DRESS-ML. speciation, iis possible to create code or 
sept representing the modelled exceptional scenario to distinct 
target platform, which canbe ether drone simulators or real drone 
tools, iy manually waiting the tool seript ox by automatically gener 
ting the code through Adel-o-Tet (MT) transformations. This 
‘tables utes to sitnlate a seein practice how the drone will 
behave in the speified exceptional scenarios and to validate the 
proposed adaptations, thus nisking corrections when needed 
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Figure 3: Model-To-Text General Process with DRESS-ML. 


Figure 3 depicts the three phases of the generic process of a 
code generation, The ist phase addresses the specification of the 
‘exceptional scenario using the DRESS modelling environment. 
the second phase, the MT generator that wil translate the DRESS 
specification into constructions encoded inthe target plafora is 
developed. As each target platform usually has diferent technolo 
ales. it may be necessary to create a specifi code generator for 
‘ach of thems, There ae several tools for defining transformations 
using, for instance, rule-based templates sceonding. to the input 
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language's AST, euch as Accele?, TextGen® and Xtext 7 of model 
Interpretaton(5, such as ANTLE®, in which parser analyses the 
‘orginal text created inthe DRESS-L. environment or an exported 
“XM-haced version ofthe modelled scenario, In both ests, ote 
tea generator, its necessary an expert who knows the syntax 
clement ofthe DRESS-ML and the language and API used in the 
target platform tobe able to make an appropriate transformation 
proces 

"The lst phase consists of generating the code an ther possible 
tuts that wil be executed inthe target platform by applying the 
‘created specific generator However, the model-to-text process uy 
‘tbe start enough to generate a complete output code executable 
ly a speeiic target platform, thus requiring a manual intervention 
ofthe developer to complet the missing code 

‘An important point tbe highlighted sth the target platform 
smut beable to allow the drone to perform sel adaptive behaviors 
At runtime, Todo that, ean use mechanisns such as dependency 
Injection (10), plugin-based spprosches [2], design patterns [11] 
or Aspect-oriented programming [14 





45 Proposal Overview 
gure 4 provides an overview ofthe modeling process sing the 
DDRESS-MI ttl the domain expert identifes the possible ex- 
ceptional scenarios regarding the done-baed apcation and the 
‘uiptivebeavior strategies foreach one. Thit stp is tof the 
Contes ofthis work andiay becariedout sing pele method 
‘logy ke the one shown in 16) a an informal way: 
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Figure 4: Modelling Process Overview 


After tha, the domain expert species the exceptional scenarios 
and the self adaptive behaviours using the high-level abstractions 
provided by the DRESS-ML and the DRESS Eaitr. Finally, the 
friginer can export the modeled seenaris tothe selected target 
platform fom which (he can validate the self adaptive behaviour 
‘Av explined, tht can be done either anally or by implernenting 
‘au M2T engine that translates the DRESS-mnodelled exceptional 
‘cenatios to executable cade om the target platforms. 


5 EVALUATION 


“The evalutton of our proposed DSL, consisted on apron of concept 
In which we modelled four diferent exceptional scenarios and the 


‘ie enraged 


corresponding drones sel-adaptive behaviours far an example ap 
plication that utes drone to monitor a forest eatch frie spots, 
Inaadition, we ereated an MZT generator to the Dragonly drone 
simulator [17]. That tol has bee chosen since it isan open source 
tool tha allows the implementation af self-adaptive behaviours for 
drones through the use of aspect-based wrappers aad provides the 
necessary drone resources and envisoament variables used in the 

lithe next sections, we apply and desribe the proposed process 
and modelling language, presented in the previous section, to the 
fire monitoring example, 


5.1 Example application and drone’s normal 
behaviours 

‘Due tothe large ecological degradation resulted by forest fires 

that oeeuzed in 2020 [27], a certain government decided to use 

drones for forest fe detection and monitoring This aplication 

provides a continuous remote recoeder, geographic postion and 

‘tnoke detection through the done adits sensors, thus enabling 


to detect ire areas. The forest monitoring is intended ta collect 
data about the evolution of fie deviation and o assist teams in the 
contol of ie spots, thereby helping to protect othe enviranment 
and riverside communities, 

Given that, the objectives ofthe application ate (i) to monitor 
fire outbreak and (i) to minimise drone losses. The exceptional 
sconarios were elaborated based an these goals. The drone will 
‘monitor the forest by using is sensors, such as camers, tnake 





Figure 5: Forest Fire Environment Simulation, 


‘The environment ofthe proposed drone application, created 
using the Dragonfly tol is shown i Figure 5, which lustrates a 
forest crossed by iver (represented by blue squares), and regions 
ofan. In addition, there are houses representing riverside com 
‘munities and antennas that perform transinission and reception 
‘of radio und TV signals. The drone start it journey from a way 
point that is located at the westside ofthe forest (represented by & 
circle with letter H inside}, it fies over the forest fllowing the 
Aight plan and monitoring the envizonment, and it Landsat the 
destination pont (ls indicated by anther way point inthe east 
se of the forest. 

In Dragonfly the drone fight ean be cased out either automat 
seal or manually Inthe former the plot creates the ight plan 
and loads it onthe drone before starting the musion, while in the 
latter the plot can canto the drone manually by using a remote 
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contol. necessary the plot can change the drone’s ght mode 
at anytime 

‘The drone of this application behaves following originally the 
predefined scenarios iustrated in Figute 6 Each seenaio encloses 
‘se of operations that the dvone has to perform, but forthe sake 
of simplicity, they have been omitted. Full boxes represent the 
‘one's standard specification. tis assumed thatthe drone can 
‘monitor is battery (0), the target distance (f), the distance fom the 
origin (ed, wind conditions, and verify the type of geographical 
region it is ying over (water or Land), either using internal sensors 
‘of accessing external information provided by webservices, for 
Instance In addition, stras of operations and sensrs/actuators of 
the drone can be retrieved. 
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Figure 6: Forest fire scenarios 


Initially the drone takes off Take Off seenai) forthe mission, 
‘uring ight, the drone periodically checks its status (Check Status 
Scenato) In addition, when a drone arvives at its destination, the 
plot sends a landing command to the drone (Landing scenato, 
‘which is acknowledged when the drone lands on the ground, and 
alter it shuts down (Shut Down scenario). 

“The drone has a predefined function that invokes a safe landing 
(Safetandongscenaie) procedure when its battery eaches a eitical 
Tin, in this ease 10%. The Return to Home (RTH) operation (RTH 
scenic) sa drone protetion feature. When a drone control error 
‘occurs far example, due toa signal lost) it goes to the pre-defined 
RTH height and starts toying bak straight tothe intial oeation 
(home poi 





5.2 Designing the exceptional scenarios 
Following the process depicted by Figure , we initlly discover he 
‘exceptional scenarios that may occur regarding the fotest mato. 
ing example, The identified exceptional scenarios are also shown 
{in Figure through dashed boxes and ate detailed below 

[wat identified that an exceptional scenario may happen when 
the drones battery eaches 105,12, it should peeform asafe landing, 
‘tits ying over water (eg, anver oF the sea) or overs region 
with ite and it would not manage to arrive atthe destination due 





to the long distance tothe target way point greater than 2Kin) and 
the weak wind conditions (speed less than Sins. This Would make 
the drone to break objective (4) since, by landing on water or on 
‘region with fie the drone would be let. Thetfore, the Move 
‘Ande exceptional sonar should take place when the conditions 
‘eseribed above are true and before the nortnal behaviour Safe 
Landing. After executing the exceptional scenario, Le, when the 
drone is manoeuvred to fly over a safe region (no-fie land), the 
‘expected behaviour may happen. 

'A ploper operation of the GPS is necessary fr the drone to 
follow the controller's ight plan since the way points ate defied 
fn terms of latitude longitude, and altitude, information provided 
ty that sensor. Thus a situation th ea eause an RTH operation 
‘is when the drone has faulty connection tothe GPS, Paticulaly 
‘the the drone is elose to the destination, it could glide fr a while 
‘or even perform some random movements until a good signal is 
‘established, thus avlding to return ta the tating point unnecer 
‘arly Based on tha, Switch To Manuat exceptional seenario wakes 
the plot to take control of the drone, thus avoiding the drone fram 
performing the RTH operation. Therefore this adaptation collabo 
{ales toachieve the application objective () since by taking over the 
drone conto, the plot can continue the environment monitoring, 

‘The RTH operation can cause undesired situations for example, 
the height has not been adjusted correctly to avoid tal obstacles, 
such as trees and antennas, and ithe obstacle avaidance sensor 
does not work correctly, the drone ea colle, Ths, the Safe RTH 
‘exceptional scenario performs safe landing operation to guarantee 
the drone's safety in the situation where thete ia malfunction in 
the collision sensor dutig the RTH operation, Therefore i educes 
the loss of drones, objective i) ofthe application. 

‘Although the eamera is used to support monitaring the forest 
region, it ean also be used at an instrument to asist in locating 
alos drone. Based on this premise, the EmergencyCamera excep 
tional scenario was ereated. When the drone needs to perform a 
safe Landing and has a problem with the GPS, loclising it may be 
challenging, Therefore, photos or videos tha the camera takes can 
provide fingerprints to asset in locating the drone. This scenario 
‘applies the emergency mode that reduces the drone's battery eon 
‘imupion, tums onthe camera directed either to the rigin otto the 
‘destination locations through the gimbal actuator, depending on 
‘which one is loser. This adaptation tries to maximise the chance 
‘of the drone to be tracked ina situation where the drone elt 
therefore it asists in the objective () ofthe application. 


5.3 Modelling exceptional scenarios with 
DRESS-ML. 

Sitch ToManual, The implementation of SwitchTaanual excep 
tonal scenario using DRESS-ML isshown in Figure. The condition 
th characterises this scenario ie specified inthe Given clave using 
the assorted expressions that handles comparisons of the status 


af the GPS and flight resources, and comparative expression ofthe 
Telative distance of drone 

“The RTH scenario {jon pint shown in Figure 6 is intercepted 
when the return to home starts event occurs, asindicated in the When 
‘aus. In onder to override the execution of the ATH predefined 
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Figure 7: Switeh to manual exceptional scenario modelling 
with DRESS-ML 


scenario with the adaptation called turaNanua, it was used the 
suaptation type Around in Then clause 

‘The sept in the Then clause defines the start manual light 
‘antol as necessary adaptation. Thus, the drone catea changes 
to the manus), enabling the pilot to take over the fight and to 
conduct in the safest way posible 


MoveAulde, Figure & depicts the exceptional scenario MoveAsde 
‘modelled using DRESS-ML. The exceptional senatio happens when 
the drone: 5 flying over ether water vegan or tegion with 
feu) the wind isnot trong: i) and the drone is atleast 2000 m 
away fiom the target. This i tepresented by the join point 1 the 
Figure 6, Note tha, at this moten, the domain expert is interested 
Insspeciying the conditions tht apply forthe exceptional scenario 
‘equrless how the information wil be aegieed (eg, how to know 
thatthe drone is above water). This will be translated toa drone 
platform or simulator by a technology expert inthe code generation 
Phe When clause indicates that safe landing would be exe 
cuted, but by following the specification of the Then clause, the 
‘elf-adaptve behaviour must ocur before the execution of the safe 
landing command, since the advice Here has been used. In this 
‘ase, the drone verifies whether it ix til over either water tegion 
for region with Hire and ifs, it moves aside, This performed until 
{teaches a nose land. After the adaptive behaviour has been 
finshed, then the safe landing command is executed. 


Exceptional Seenarto Novenside 
Given: ( ( (Orone.cistance trom WATER region 
8m) on ( ShokerDetector. result 
DeTECreD J } and { Windspeed < 5 m/s ) snd 
(Drone.distence trom DESTINATION region >= 
200) 99 
hen: SafeLanding STARTS 
‘Then: execute Seror= goLantieason 
‘oLandegian 
while ( @rone.tistance fren LAN reaion 
© m) and ¢ SmokerDetector.necutt 
ou oerecteas )-) 
Drone.cirection LAND region 




















sure #: Move Aside exceptional scenario using DRESS-ML. 


SafeRTHL The modelling ofthis scenari using DRESS-MI. can 
bbe seen in Figure 9. The Given clause was implemented using a 
logical expression containing inner expresions about the staus 
ofthe RTH and the collision senwor, attocatng them by an “and” 
operston 


Exceptional Scenarto SafeRTH 
Gaven: (CC RTH.status == STARTED ) and 
( Obstaclesvoidance. status == ERROR ) ) 
nen: Orone.maneuvers. * 
‘Then: execute Around newsaretane 
ewsafeLand + 
START SafeLanding 








Figure 9:Safe RTH exceptional scenario modeling with DRES- 
ML 


‘The first internal expression compares whether the status of 
the retun-fo-home operation is "STARTED", which indicates that 
that safe procedure is being executed, The ast internal expression 
checks whether the status ofthe obstacle gerigor is equal tothe 
terror value, epretenting the situation in which that resaurce is 
fay 

‘Ascan be sen, the join pint 3 (see Figure 6 allows intereption 
Inthe predefined Fying scenario, Ths is modelled within the When 
clause using the drone manoeuvre dition event without defining a 
specific direction (wildcard "")- This strategy is important beeause, 
‘whatever the direction of the drone's manoeuvre i, the join pot 
invalid 

In the Then clause, Around is used to prevent thatthe drome 
continues maneuvering and make ito perform the adaptive behav 
{or modeled within the script named newSafeLand. The setpt that 
defines the adaptive behaviour frees only starting a safe landing 
‘command, assuming that making that ie safer for the drone than 
‘keeping flying towards home without the ellison sensor working 
propetty. 


EmergeneyCamera.Figute 10 shows the implementation ofthis 
scenato using DRESS-ML, The Given clause contains «conditional 
‘expression tha verifies whether the GPS status equal to "ERROR" 
‘As itcan be seen in Figure 6, the jin point 2 intercepts after the 
‘execution ofthe SafeLandingscenaria, Thetefore, ts modelled 
‘using the safe landing event starts event inside the When cause, and 
“After is specified in the Then clause, indicating thatthe adaptation, 
Tepresented by sript called helperCamera, should occu aftr the 
safe Landing procedure is performed. 

“The adaptive behaviour start the camera, the manual gimbal 
and the energy saving mode, Tallow the eamera to pot tothe 
‘nearest region between origin and destination, its used the (se 
satement, which checks whether the drone's distance frou the 
origins less than the destination distance If'so, the drone should 
point the eamera to the west using the gimbal rotation event (it 
totes the eamera to 180 degrees on the yam axis). Otherwise, 
the drone rotates ta 0 degrees also onthe yam axis It is worth 
‘mentioning that twas assumed thatthe drone alway initiates ite 
‘mission in the west and has the destination inthe estas tated in 
the problem description, 
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Exceptional Scenario Energencytanera 
Siven: ( 6PS.status == FRADR ) 
men: SaFeLanaing STARTS 
Then: execute (*e° helpencansra 
hetpercanera 
START Camera 
START MANUAL gamba 
START EnergySavingtode 
Sf Crane. distance from ORIGIN region < 
DESTINATION region ) 
Yall GSnbal rotation to tan 
ous 
YAN Ginbel rotation to 9 * 





Figure 10: Emergency camera exceptional seenario modeling 
swith DRESS ML. 


5.4 Exporting to a drone simulator platform 


“The Dragonlly tool uses AOP-based wrappers to implement the 
self adaptve behaviour of drones, Therefore, the MAT pracess has 
te transform the DRESS models in wrapper code. In this session, an 
overview ofthis transformation pracest is presented, and awrapper 
generated fr ane ofthe exceptional scenarios previously modelled 
{setae 

Figure 11 shows the mapping between the BDD concepts used 
In the DRESS-MIL andthe AOP technique for exeating wrappers for 
the Dragonfly tol. The state ofthe world Given} along with the 
‘nggered event (When) epresent together the condita! poteut 
‘in ADP, 42, the function ofthe code that has tobe intercepted and 
the conditions todo that. The adaptive behavior (The) sepresente 
both the clause of the advice and the new function that will be 
‘executed to apply the adaptation, 

‘Afr defining how the DRESS-MML concepts can be translated 
{nto an aspect, it is posible to implement an engine to perform an 
utomated translation that generstes executable wrapper code for 
the Dragonly tool. That proces was performed sing the TextGen 
language thai integrated with the MPS JetBrains, That integration 
allows TestGen to traverse each nde ofthe DRESS-ML AST and to 
transfor into output tex values (the aspect code) implemented 
through templates 

"The M2T generator performs the transformation process by 
starting the execution from the root (ExceprionalScenario nod) 
fd going through the tre according tothe script speciation, 
‘That template constructs the header and delimit the body ofthe 
aspect objet. The name and body content of the aspect lass are 
‘requested from atabute name, and Given, When and Then ehld 
‘ade, respectively. 

"The sub tree ofthe AST that specifies the Given clause repr 
sents the actual contest of done and the envionment forming the 
‘condition ofthe advice. These expressions contain templates that 
tse the Dragonfly APL and values specified in theatibuts ofeach 
‘node to define the conditions that ste understandable by the to. 

‘Theevent inside the When cause is the join post tothe adaptive 
tehaviour thus the When node contains the terplate that declares 
the pointcut and its child specifies the signatute of the method 
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Figure 11: Correlation hetween DRESS-ML. and AOP struc- 


from the tol’s API that represents that event, Finally, the Then 
‘node contains the device type speification (before afte o around) 
and specifies instructions for the drone to perforin the expected 
‘daptation 

‘After the MAT process has ben carted out, foreach modelled ex 
ceplonal scenario in the DRESS language, a wrapper that contains 
the self- adaptive behaviour forth scenario using APT commande 
ofthe target tool ie ereated. Thus, the wrappers can be compiled 
and executed together with the Dragonfly simulator Asan example, 
Figure 12 shows the generated wrapper forthe EmergencyCamera 
exceptional scenario depicted by Figure 10. The code of the other 
‘wrappers and their executions in the simulator an be found in the 
repository ofthe DRESS-ML repository. 





public aspect EmergencyCameral 
olntout chackEscepionalcandtane(): cll (old safeL ting) 
old sey checkExceptionacandiens! 
ions getCarerasate) =~ FAILURE") 
hapercameracrona 





, 
old heperCamerayDrone one 
‘rons cetCameraSit=C ON, 
‘one setGambalSiate ON) 
tron sot-conemyMedetiue) 
if (drone geDistarce( ORIGIN} « 
hone getDstaroe( DESTINATION i 
ane setGambialDvacton( WEST), 
wise 
tne selGambialOvacton( EAST") 


Figure 12: Generated Wrapper for the EmergeneyCamera 
Exceptional Scenario, 


5.5. Limitations 
In this section we discuss the main limitations ofthis work, 
Domain analysis. Athough we have relied on the academic 
Iiteratute, industry tools and profesional documentation to identify 
the main concepts used in the proposed language, we have not 
collected the requirements from dontain experts nor from the grey 
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Iiteratue. This may impact the completeness ofthe DRESS-ML, 
since the language may not cover all the relevant concepts of the 
dlornain 

Applicability We presented only one example ofa drone-based 
pplication considering four exceptional senatio. For a mote con 
‘ete analysis of ts applicability, the DRESS-ML needs to be exe. 
‘sed not only to model more scenarios in the given ie detection 
example, but also to made! diferent domain applications, such as 
fou delivery rescue situations, and building inspection. This can 
show whether the abstractions introduced in the language are ex 
pressive enough to model other domains and can help to identify 
the missing concept 

‘Cade generation. We argued thatthe DRESS models can be 
transformed into specific drone platforin artefacts. However, we 
only showed this process for one drone simulator. Hence i i nec 
essary to implement the MZT processor even a manual approach) 
for other platforms, prticultly the ones that used in eal drones, 
Moreover nother technique besides aspect-oriented programming 
Jha been tested to ined adaptive behavior a untime We need 
to investigate diferent adaptation strategies, such as dependency 
Injection and design patterns, to analyse how the DSL. adaptation 
structure can be translated to other drone platforms, 

Evaluation. We also recognise that this work lacks amore rigor 
‘ous evaluation Even though the presented poof of concept showed 
that the DRESS-ML works, it doesnot measure several properties 
of «modeling language, such ae level of abstraction, usability, mod 
‘laity productivity nd learnability. Therefore, empirical experi- 
‘ments with practitioners and drone programmers ae necessary for 
si in-depth evaluation of ther aspects ofthe proposed language. 

Comparison with the state of the art, tl lated to the eval 
uation, this work did not compare the proposed language to other 
‘existing drone modeling languages. This can show whether DRESS 
MLis indeed more useful than ether DSLs for drones, its eal gains 
and drawbacks 








6 CONCLUSION AND FUTURE WORK 


“This work presented a domain-specific modelling language, called 
DRESS-ML, to specify exceptional scenarios and self-adaptive be- 
havious for drone-based applications The proposed language is 
bhsed on techniques such as behuviour-driven development and 
sepect-oriented programming and was implemented using the Je 
brains Meta Programining System (MPS), which also provided 
user-friendly modelling environment. To validate the applica 
ity ofthe proposed DSL, a proof of concept was eared out in 
‘which fou exceptional scenarios fora forest monitoring applica 
tion were modelled, In addition, we created an engine to wansform 
the scenario speciestions into wrapper code used by the Drago 
fly simulator fool, thus allowing the users to verily whether the 
specification ofthe adaptive behaviour works properly. Therefore, 
wwe have shown that our approach ie valid and may be helpful to 
specify exceptional senaros for other drone-based applications. 

"To provide an effective domain-specific language, ii necessary 
to make it as functional and expressive as porsibe, Although the 
DDRESS-ML covers large number of drone rexoutees, we ae wate 
that there may be other ones that ave not been contemplated in 
thie version ofthe language. Moreover, the language focuses on the 
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bbchaviour adaptation of only one drone, thus missing constructions 
to address multiple drones in ne exceptional scenario It also lacks 
ways to indicate a precedence order of self- adaptation functions 
‘when two or more exceptional scenatios confit 

‘As future work, we expect to cover some of the limitations 
pointed outat the endof the Evaluation section, We plan teary ot 
thorough evaluation with domain practitioners ad progratmers 
‘Tegarding modelling exceptional seenatios and adaptive Behaviors 
in other application examples to analyse diferent aspects of the 
DSL. In addition, we intend to investigate the use of other drone 
target platforms and MT mechanisms to verify to what extent 
the proposed adaptive behaviour structure can be implemented in 
zeal drones or simulation tools. Finally a comparative study of the 
proposed language with donsain's state-of-the-art techniques can 
help to improve and evalve the spproach, 
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